实时监控下的动态远程证明模型*

针对现有远程证明技术仅对远程平台进行接入网络前的静态信息验证的局限性，本文提出了实时监控下的动态远程证明模型（DRAM-RTM），该模型从平台行为和实时监控两个方面提升远程平台接入网络后的可信性。它将平台行为分为系统访问控制策略的变化行为和用户的应用行为，并将对行为的完整性度量和对动作执行情况的验证联合起来以提高证明的可信性；考虑到实时监控的负载开销，模型根据远程证明的历史验证结果动态调整监控力度，提高了模型的性能；最后给出该模型的协议并进行了分析。

Dynamic remote attestation model in real-time monitoring

As for the limitation of static information verification in the current remote attestation,this paper introduced a new dynamic remote attestation model in real-time monitoring.It improved the platform's dynamic trustworthiness from behavior and real-time monitoring after its connection to the trusted network,divided all the platform's behaviors into the changes of access control policy and user's applications.Meanwhile DRAM-RTM combined the behavior-based integrity measurement with the action of behavior to...